Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A device-ID validation flaw in OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) by calling flow.cuda.synchronize() with an invalid or out-of-range GPU device index.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2025-65890 OneFlow v0.9.0 Denial of Service via Malformed GPU Device Index Validation https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-65890
Post summary
A brief disclosure of a Denial of Service vulnerability in OneFlow v0.9.0 caused by malformed GPU device index validation, with a reference link to a vulnerability detail page.
CVE-2025-65890 A device-ID validation flaw in OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) by calling flow.cuda.synchronize() with an invalid or out-of-range G… https://www.cve.org/CVERecord?id=CVE-2025-65890
Post summary
CVE-2025-65890 is a device-ID validation flaw in OneFlow v0.9.0 that can cause a denial-of-service when flow.cuda.synchronize() is invoked with invalid IDs; no exploitation or mitigation details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | oneflow | oneflow | 0.9.0 | - | - |